Infinity CGI Exploit Scanner 3.11 - Cross-Site Scripting

Author: badpack3t
type: webapps
platform: cgi
port: 
date_added: 2003-06-12  
date_updated: 2012-11-17  
verified: 1  
codes: OSVDB-54140  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 22770.txt  

source: https://www.securityfocus.com/bid/7910/info

Infinity CGI Exploit Scanner is reported to be prone to a cross-site scripting vulnerability. An attacker could exploit this issue to creating a malicious link to a site hosting the software that contains hostile HTML and script code. If this link is visited by a web user, the attacker-supplied code could be interpreted in their browser.

http://www.example.com/cgi-bin/nph-exploitscanget.cgi?host=%3Cscript%3Ealert%28document%2Ecookie%29%3C%2Fscript%3E&port=80&idsbypass=0&errchk=1